Malware4 min read
EtherRAT Spreads via Fake IT Support Calls on Microsoft Teams
Unit 42 uncovers Node.js-based RAT using Ethereum smart contracts for C2. Attackers impersonate IT staff on Teams calls to install remote access tools before deploying EtherRAT.
James RiveraJul 10, 2026